Privacy Policy

po4d ("the Company", "We", "Us", "Our") is committed to protecting the privacy of all individuals who interact with our platform. This Privacy Policy describes how we collect, use, store, share, and protect personal data in connection with the services we offer to Members and visitors, with particular reference to our primary market of Indonesia.

This Policy should be read alongside our Terms & Conditions, which govern your use of the po4d platform as a whole. Where this Policy uses terms defined in the Terms & Conditions (such as "Member", "Account", "KYC", "IDR"), those definitions apply here equally.

We act as the data controller in respect of all personal data collected directly from you through the Platform. Where we engage third-party service providers (such as payment processors or identity verification partners) who process data on our behalf, those parties act as data processors under written agreements that bind them to standards consistent with this Policy.

po4d collects personal data from you in three principal ways: data you provide directly, data generated automatically by your use of the Platform, and data we receive from authorised third parties. The categories of personal data we process are described below.

po4d uses the personal data we collect solely for legitimate, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:

• Account creation and management: To register your account, verify your identity, maintain accurate account records, and provide you with access to the full range of po4d services.
• Transaction processing: To process deposits and withdrawals in IDR via local payment channels including BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja, and to maintain accurate financial records of all transactions.
• KYC and regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML) regulations, to verify the age and identity of all Members, and to screen accounts against international sanctions and politically exposed persons (PEP) lists.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, unauthorised account access, and any other prohibited conduct as defined in our Terms & Conditions.
• Service improvement and personalisation: To analyse usage patterns and betting behaviour on an aggregated, anonymised basis in order to improve the Platform, optimise game offerings, and personalise your experience where you have consented to personalisation.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and deliver effective after-sales service via live chat, email, and WhatsApp.
• Marketing and promotions: To send you relevant promotional offers, bonus notifications, and seasonal campaign communications — but only where you have opted in to receive such communications or where we have a legitimate interest in doing so, and always subject to your right to opt out at any time.
• Legal proceedings and dispute resolution: To exercise or defend our legal rights, respond to regulatory enquiries, and cooperate with law enforcement where required by applicable law.

Every instance of personal data processing carried out by po4d rests on one or more of the following recognised legal bases:

po4d does not sell, rent, or trade your personal data. We share your data only in the following defined circumstances, and only to the extent strictly necessary for each purpose:

• Payment service providers: We share financial data with your chosen payment institution (e.g., BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) solely to process your deposit or withdrawal transaction. These providers process your data as independent data controllers under their own privacy policies.
• Identity verification partners: We share identity data with our authorised KYC and AML screening partners to verify your identity, confirm your age, and screen your account against sanctions lists. These partners act as data processors under written data processing agreements with po4d.
• Gaming software providers: Technical identifiers (such as anonymised player IDs and session tokens) may be shared with our game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — to deliver their game content through our Platform. These providers do not receive your name, banking details, or government ID data.
• Regulatory and law enforcement authorities: We will disclose personal data to competent regulatory authorities or law enforcement agencies where required to do so by law, court order, or enforceable governmental request. We will notify you of such a disclosure where we are legally permitted to do so.
• Professional advisers: We may share personal data with our legal counsel, auditors, accountants, and insurers where strictly necessary for the provision of professional services, subject to appropriate confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data held by po4d may be transferred to the acquiring entity, subject to equivalent privacy protections. We will notify affected Members in advance where feasible.

As an internationally operated platform, po4d may transfer your personal data to servers and service providers located outside Indonesia. When such transfers occur, we take the following steps to ensure your data remains protected:

• We transfer data only to countries or organisations that provide an adequate level of data protection, or we implement appropriate safeguards — such as standard contractual clauses — with the receiving party.
• All third-party data processors who handle data outside Indonesia are subject to written data processing agreements that impose data protection obligations equivalent to those described in this Privacy Policy.
• Server infrastructure used by po4d is housed in data centres that maintain ISO 27001 certification or equivalent internationally recognised security standards.
• Where data is processed in a jurisdiction that does not afford the same level of protection as Indonesia, we conduct a transfer impact assessment and implement supplementary measures to mitigate identified risks prior to the transfer taking place.

po4d retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and business planning purposes.

po4d uses cookies and similar tracking technologies to operate the Platform efficiently, remember your preferences, analyse traffic patterns, and — where you have consented — deliver personalised content. The following types of cookies are used on the Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without impairing Platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and whether you have previously acknowledged certain notices — to provide a more personalised browsing experience.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors interact with the Platform — including which pages are visited most frequently and where users encounter errors — to help us improve the user experience. We use first-party analytics tools for this purpose.
• Marketing cookies: With your consent, we may use cookies to deliver promotional content relevant to your interests. You may opt out of marketing cookies at any time via your account settings without affecting your access to core Platform features.

Most web browsers are configured to accept cookies by default. You may adjust your browser settings to refuse or delete cookies at any time; however, doing so may impair certain features of the Platform. Detailed cookie management instructions for the most commonly used browsers in Indonesia are available via each browser's help documentation.

As a data subject, you hold meaningful rights over your personal data. po4d is committed to facilitating the exercise of these rights promptly and without creating unnecessary barriers. Your rights include:

To exercise any of the above rights, please submit a written request to our support team via email at support [at] po4d.cam with the subject line "Data Rights Request – [Your Account Username]". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, of which we will notify you.

The po4d platform is intended exclusively for adults aged 21 years and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC processes.

If po4d discovers — through our KYC process, a third-party report, or any other means — that an account has been registered by or on behalf of a person under 21 years of age, we will immediately suspend that account, void any associated wagers and winnings, and securely delete all personal data associated with the underage individual. Real-money deposits may be returned to the source payment method following a compliance review.

If you are a parent or guardian and believe that your child has registered an account on the po4d platform without your knowledge, please contact our support team immediately. We will investigate and act on all such reports as a priority matter.

po4d implements a layered information security programme designed to protect your personal data against unauthorised access, alteration, disclosure, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using the current industry standard. Connections over plain HTTP are automatically redirected to HTTPS.
• At-rest encryption: Sensitive data stored on our servers — including identity documents, financial records, and account credentials — is encrypted using AES-256, the same standard adopted by international financial institutions.
• Access controls: Access to personal data within po4d's internal systems is governed by a strict role-based access control (RBAC) policy. Only staff members with a demonstrable operational need are granted access to any given category of personal data.
• Multi-factor authentication: Administrative access to production systems and databases requires multi-factor authentication (MFA). We also encourage all Members to enable MFA on their po4d accounts for added personal security.
• Penetration testing: Our Platform and underlying infrastructure are subject to regular independent penetration testing. Identified vulnerabilities are remediated within defined SLA timeframes based on severity rating.
• Incident response: We maintain a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required by applicable law.

The po4d Platform integrates with a number of third-party service providers to deliver a complete betting and gaming experience. While we carefully vet all third-party partners and require them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third parties once data leaves our direct control.

Third-party services integrated into the po4d Platform include, but are not limited to:

• Payment processors: BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja each operate under their own privacy policies and data protection frameworks. We encourage you to review the privacy policy of any payment provider you use.
• Game studios: Content delivered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft operates within embedded technology frames on the Platform. These studios receive anonymised session tokens and do not have access to your identity or financial data.
• Identity verification: Our KYC partner processes identity documents solely for the purpose of age and identity verification. All KYC data is handled under a strict data processing agreement and is not used for any other purpose.
• Customer support tools: Our live chat and support ticketing systems are provided by industry-standard third-party platforms. Conversations conducted through these tools are stored in accordance with our standard retention periods outlined in Section 7.

The Platform may contain references to other websites or services for informational purposes. po4d exercises no control over those external websites and accepts no responsibility for their content or privacy practices.

po4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. When a material change is made to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Send a notification to your registered email address summarising the key changes;
• Where required by applicable law, seek your renewed consent before processing your data under the revised terms.

Your continued use of the po4d Platform following notification of an amendment to this Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any amended terms, you may request account closure by contacting our support team and we will return any eligible balance to your registered payment method following a compliance review.

We recommend that you review this Privacy Policy at least once every six months, and whenever you receive a notification of an update from us.

If you have any questions about this Privacy Policy, wish to exercise a data right, or need to report a potential privacy concern, please contact the po4d data team through the channels below. All privacy-related correspondence is handled with strict confidentiality.

This Privacy Policy was last reviewed and updated on 1 January 2026 and supersedes all prior versions of the po4d Privacy Policy.